Make a CSR, or check that a key and certificate match
Open a tool, look up a domain, or find one you already follow.